Merge pull request #6 from DiSSCo/feature/add-actuator

Add actuator and web to enable the /health endpoints

.github/workflows/.trivyignore

@@ -1,4 +1,3 @@
-# Date: June 16, 2023
-# Issue: snappy-java high issue, https://www.cvedetails.com/cve/CVE-2023-34453/
-# Solution: Spring needs to update its version
-CVE-2023-34455
+# April 18 2024
+# Spring boot needs to update its version of spring
+CVE-2024-22262

Dockerfile

@@ -4,7 +4,7 @@ ARG JAR_FILE=target/*.jar
 COPY ${JAR_FILE} application.jar
 RUN java -Djarmode=layertools -jar application.jar extract
 
-FROM eclipse-temurin:17-jre-alpine
+FROM eclipse-temurin:17-jdk-alpine
 RUN adduser -D -u 1000 java
 WORKDIR application
 COPY --chown=java:java --from=builder application/dependencies/ ./

pom.xml

@@ -6,7 +6,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>3.1.0</version>
+    <version>3.2.4</version>
     <relativePath/> <!-- lookup parent from repository -->
   </parent>
   <groupId>eu.dissco.core</groupId>
@@ -16,8 +16,7 @@
   <description>DiSSCo core consumer for event provenance records</description>
   <properties>
     <java.version>17</java.version>
-    <snakeyaml.version>2.0</snakeyaml.version>
-    <testcontainers.version>1.17.6</testcontainers.version>
+    <testcontainers.version>1.19.7</testcontainers.version>
     <sonar.organization>dissco</sonar.organization>
     <sonar.host.url>https://sonarcloud.io</sonar.host.url>
     <sonar.coverage.jacoco.xmlReportPaths>../app-it/target/site/jacoco-aggregate/jacoco.xml
@@ -67,7 +66,14 @@
       <groupId>com.fasterxml.jackson.datatype</groupId>
       <artifactId>jackson-datatype-jsr310</artifactId>
     </dependency>
-
+    <dependency>
+      <groupId>org.springframework.boot</groupId>
+      <artifactId>spring-boot-starter-actuator</artifactId>
+    </dependency>
+    <dependency>
+      <artifactId>spring-boot-starter-web</artifactId>
+      <groupId>org.springframework.boot</groupId>
+    </dependency>
 
     <dependency>
       <groupId>org.springframework.boot</groupId>